spryker/navigation-collector

Release historycaution

The package has had no registry release in over four years and none in the last 12 months, which raises version freshness and abandonment concerns. Recent repository activity partly offsets this, but does not replace a current published release.

Repo toolingcaution

The project uses Composer build tooling, but no security scanning tools were detected. This is a modest process gap rather than evidence of unsafe dependency behavior.

Security policycaution

No repository security policy was found, reducing transparency about vulnerability reporting and response expectations.

Workflow auditcaution

The single workflow was fully analyzed with no audit findings, no untrusted checkouts, and no script-injection paths. However, two of four action references are unpinned, leaving a modest reproducibility and workflow supply-chain gap.